vIDM login Fails with Error "jit.user.attribute.missing User attribute is missing: userName" using Entra ID.

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

• When attempting to log in to VMware Identity Manager 3.3.7 integrated with Microsoft Entra ID authentication fails.
  
  
• The following error message is displayed in the UI.
  

  Identity Manager encountered an error. Contact your admin and provide the information displayed below.
Message
jit.user.attribute.missing User attribute is missing: userName.

Environment

VMware Identity Manager 3.3.7

Cause

This issue occurs because the vIDM, requires a mandatory, case-sensitive attribute named userName in the SAML assertion.

Resolution

To resolve this issue, you must manually add the userName claim in the Microsoft Entra ID.

1. Log in to the Microsoft Entra admin center.
2. Navigate to Identity > Applications > Enterprise applications and select your vIDM SAML application.
3. On the left navigation menu, click Single sign-on.
4. Click Edit on the Attributes & Claims.
5. Click Add new claim and enter the following parameters exactly as shown:
   • Name: userName 
     
   • Source: Attribute
   • Source attribute: user.userprincipalname (or user.onpremisessamaccountname depending on your environment) 
6. Click Save.

Ensue you include the attributes and claims documented in KB VMware Identity Manager(vIDM 3.3.x) on Azure Active Directory With JIT Provisioning